Title: DyFuCa

Type: Dialers

Remove DyFuCa. Removal instructions

Also known as: Downloader.Dyfuca, TrojanDownloader.Win32.Dyfuca

Severity scale:

(20 / 100)

Dyfuca is a dialer, which runs at startup and dials to porn servers. This will lead to your phone line being charged expensive rates. Dyfuca may be spread as an Internet Optimizer Utility via the Internet. This program is also suspected of being able to download more spyware or other malware on your computer.

Dyfuca is a threat and as such should be removed upon detection.

Related files: Wsem.dll, stmtdlr.exe, COMEDY.EXE, NEM211.DLL, optimize.exe, VIEW-M~1.EXE, actalert.exe

DyFuCa properties:
• Hides from the user
• Stays resident in background

Automatic DyFuCa removal:

remover for DyFuCa

SpyHunter is recommended remover to uninstall DyFuCa. You should confirm using free trial that it detects current version of parasite.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manul removal instructions below.

If you failed to remove DyFuCa using SpyHunter please report this to us.

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use.

STOPzilla

download | review

We are testing STOPzilla's efficiency at removing DyFuCa (2008-08-27 15:45:56)

Malwarebytes Anti Malware

download | review

We are testing Malwarebytes Anti Malware's efficiency at removing DyFuCa (2008-08-27 15:45:56)

Spyware Doctor

download | review | tutorial

We are testing Spyware Doctor's efficiency at removing DyFuCa (2008-08-27 15:45:56)

XoftSpySE Anti Spyware

download | review

DyFuCa manual removal:

FORUM:
Discuss DyFuCa in
spyware removal forum

Kill processes:
actalert.exe, msbb.exe, optimize.exe, saie.exe

HELP:
how to kill malicious processes

Delete registry values:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}
'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4}

HELP:
how to remove registry entries

Delete files:
Wsem.dll, stmtdlr.exe, COMEDY.EXE, NEM211.DLL, OPTIMIZE.EXE, VIEW-M~1.EXE, actalert.exe

HELP:
how to remove harmful files

Delete directories:
\DyFuCA

Information added: 2004-03-19 10:00:00
Information updated: 2008-08-27 13:08:41

Additional resources related to DyFuCa:

Attention: If you know or you have a website or page about DyFuCa removal, feel free to add a link to this list: add url

more resources

Guest

I sent the company an email telling them I wanted this off my machine. These are the instructions that I received:

To remove the program, please follow these directions:

Open your Control Panel (you should be able to find this in your Start Menu, either on its own or under Settings).
Open Add/Remove Programs. This brings up a list of programs installed on your computer. Notice the scroll bar (may not appear if you have very few programs installed) You may need to scroll through this list to view all your installed programs.
Scroll down until you see the program you wish to remove, click on it to highlight and choose Remove or Add/Remove. The two programs are Internet Optimizer and Active Alert.
Follow any additional screen directions.

If you are still having trouble uninstalling the program, you may need to delete the dll file manually. To do this, first close all browser windows, reboot your computer, and then search for these files:
C:windowsiopti130.dll
C:windows
em2*.dll

From here, you can rename, move, or delete these two files.
If you cannot delete them, you may have to rename the file to something.dll.old and then reboot, then remove the something.dll.old file.

If you can't rename or delete the file, you may need to close all windows and folders, kill "explorer.exe" from task manager, and delete the file from the dos prompt. Please follow these instructions to do so:

Close all browser windows and folders. Hold down Ctrl-Alt-Del to open the task manager. Select "explorer.exe" and end the process. If you see "iexplore.exe" in the list, end that process as well.
Open the dos prompt. If you're using Windows XP, this will be in your Start menu > All programs > Accessories > Command prompt.
To delete a file, type "del" followed by the file location, then hit your enter key. For example: del C:windowsiopti130.dll Once you have done this, you can type "explorer.exe" at the dos prompt to get explorer back.

Reply »

2004 12 16

Fred

DyFuCa has been deleted long time ago on my PC. But recently I installed a new Antivirus (kaspersky) and it found a part of this old virus. When I deleted a file named Wsem114.dll, it resulted in Reseting my PC each time I connect my modem on the Internet, just after my Password is confirmed by my ISP. What is this bug?? Dyfuca was necessary to connect me over Internet?? Please HEEEEELLP!!

Reply »

2005 02 02

Guest

its really anooying

Reply »

2005 03 21

rachael

i dont want to mess up my laptop by deleting important files so i would like to check somthing.

do we delete these files:
Wsem.dll, stmtdlr.exe, COMEDY.EXE, NEM211.DLL, OPTIMIZE.EXE, VIEW-M~1.EXE, actalert.exe

Reply »

2005 03 27

Post Comment:

Attention: Use this form only if you have additional information about DyFuCa parasite, its removal instructions, additional resources or behavior. By clicking "post comment" button you agree not to post any copyrighted, unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, profane, hateful, racially, ethnically or otherwise objectionable material of any kind.

Spreading the knowledge:

It is very hard to fight Computer parasites alone in internet space. If you have a website we would be more than happy if you would help us to spread the knowledge about latest threats. You can help your visitors to manage their Computer system manually without aditional expences. Knowledge is the power, we just need to spread it.